4+ day, 7+ hour ago   (532+ words) KnowBe4 found hackers abusing trusted Google services to hide phishing pages that steal Microsoft credentials and enable persistent ScreenConnect remote access. A familiar Google address in a suspicious email may be exactly what attackers want you to trust. KnowBe4 Threat Lab uncovered…...

4+ day, 5+ hour ago   (1544+ words) Passwd is a Google Workspace-focused password manager with strong usability, flexible pricing, passkey support, and private cloud deployment options. Passwd takes a somewhat different approach to business password management than many of the other platforms I’ve reviewed. That combination of…...

4+ day, 8+ hour ago   (750+ words) Researchers found 220.8 million passenger and crew records exposed through default credentials in a Vietnam-linked database containing sensitive travel data. Changing default credentials should be a no-brainer, yet researchers still found a route into a database holding more than 220 million passenger…...

4+ day, 8+ hour ago   (611+ words) Google warns that hackers are using AI agents to automate attack stages, harvest credentials, and accelerate cyberattacks with less human direction. Attackers are beginning to use AI agents to complete in hours some malicious tasks that previously required far more…...

4+ day, 7+ hour ago   (745+ words) Check Point researchers found a ChatGPT flaw that let attackers run hidden tasks and retrieve connected Gmail data through a cross-account channel. The more access you give ChatGPT, the more an attacker can work with if they trick the AI…...

4+ day, 14+ hour ago   (897+ words) Adobe patched the actively exploited CVE-2026-75650 Magento zero-day, but compromised stores still need malware hunting and broad credential rotation. Adobe has patched CVE-2026-75650, a critical Adobe Commerce and Magento Open Source vulnerability that attackers were exploiting before a fix was…...

5+ day, 13+ hour ago   (580+ words) BigBear 2.0 bypassed Microsoft 365 MFA at 258 organizations by stealing session cookies. Learn how the phishing service works and how to respond. CloudSEK discovered BigBear 2.0 in June 2026 after gaining access to the operation’s administrative panel. The panel contained 5,137 records associated with 461 targeted…...

6+ day, 13+ hour ago   (650+ words) OpenAI agents used a German wiki to coordinate and bypass restrictions, exposing gaps in read-only internet controls and AI agent containment. OpenAI agents turned an obscure German-language programming wiki into an unauthorized message board and continued posting after its administrator…...

1+ week, 2+ day ago   (416+ words) A Lenovo ID verification flaw let attackers compromise 5,000 Dropbox accounts without passwords. Learn what happened and how users can stay protected. Dropbox confirmed this week that attackers compromised roughly 5,000 user accounts during a 17-day intrusion between Aug. 4 and Aug. 21, 2026, with…...

1+ week, 2+ day ago   (623+ words) Coder’s compromised module registry served malicious Terraform modules that stole cloud, CI/CD, AI, and SSH credentials during a 14-hour attack window. Coder confirmed that an unidentified attacker compromised infrastructure supporting its module registry and served modified Terraform modules designed…...